Base64 Encode & Decode
Encode text to Base64 or decode it back, UTF-8 safe.
JWT Decoder
Decode the header and payload of any JWT, see expiry and issued-at times in plain English, and verify HS256/HS384/HS512 signatures with your secret. Tokens are decoded locally and never transmitted.
Private by design: your input is processed on this device and never uploaded. Verify it yourself.
Frequently asked questions
Is it safe to paste a real token here?
Decoding happens entirely in your browser and the page makes no network requests. Even so, treat production tokens as secrets and prefer test tokens when you can.
Does decoding mean the token is valid?
No. Anyone can decode a JWT. Only verifying the signature with the right key proves it was issued by a trusted party and was not modified.
Related tools
JSON Formatter & Validator
Format, validate, minify and repair JSON with exact error positions.
Unix Timestamp Converter
Convert Unix timestamps to dates and back, in any time zone.
Hash Generator
MD5, SHA-1, SHA-256, SHA-512, CRC-32 and HMAC for text or files.